Backend: POST /reservations